vulnerability

OS X update for FileProvider (CVE-2024-44131)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:N)

Published

Sep 17, 2024

Added

Oct 31, 2024

Modified

Mar 27, 2026

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data.

Solution

apple-osx-upgrade-latest

References

CVE-2024-44131
https://attackerkb.com/topics/CVE-2024-44131
CWE-59
EUVD-EUVD-2024-40889
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40889
https://support.apple.com/en-us/121238

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report